Create a custom filter or transformer in Cortex XSOAR.
If you require a filter or transformer operator that is not provided out of the box, you can create your own by creating a script and then adding to the operators window.
Select
→ .Type a meaningful name for the script, and click Save.
To create a filter operator script, do the following:
In the Tags field, add the
filter
tag.If you want a custom transformer that operates on an entire array rather than on each individual item, you need to add the
entirelist
tag.In the Arguments section, add the following arguments:
Argument
Description
left
Mark as mandatory. This argument defines the left-side value of the transformer operation. In this example, this is the value being checked if it falls within the range specified in the right-side value.
right
Mark as mandatory. This argument defines the right-side value of the transformer operation. In this example, this is the range to check if the left-side value is in.
Add the script syntax and save.
To create a transformer operator script do the following:
In the Tags field, add the
transformer
tag.In the Arguments section, add the following arguments:
Argument
Description
value
Mark as mandatory. The value to transform. In this example, this is the UNIX epoch timestamp to convert to ISO format.
Add the script syntax and save.
Go to the filters and transformers window and select the operator.